---
title: "Kibana"
sidebarTitle: "Kibana Provider"
description: "Kibana provider allows you get alerts from Kibana Alerting via webhooks."
---

<Card
  title="Kibana Webhooks"
  icon="lightbulb"
  iconType="duotone"
  color="#ca8b04"
>
  Please note that when installing Kibana with Webhook auto instrumentation,
  Keep installs itself as a Connector, adds itself as an Action to all available
  Kibana Alert Rules (For each alert, On status changes, when: Alert/No
  Data/Recovered) and to all available Kibana Watcher rules as a Webhook action.

For more information, feel free to reach out on our Slack Community.

</Card>

## Inputs

_No information yet, feel free to contribute it using the "Edit this page" link at the bottom of the page_

## Outputs

_No information yet, feel free to contribute it using the "Edit this page" link at the bottom of the page_

## Authentication Parameters

The `api_key` and `kibana_host` are required for connecting to the Kibana provider. You can obtain them as described in the "Connecting with the Provider" section.
`kibana_port` can be used to override the default Kibana port (9243)

## Connecting with the Provider

### Kibana Host

Simply copy the hostname from the URL bar in your browser:

<img src="/images/kibana/kibana_host.png" alt="Kibana Host" />

### API Key

To obtain a Kibana API key, follow these steps:

1. Log in to your Kibana account.
2. Click Stack Management
3. Click on Security
4. Click on API Keys

<img src="/images/kibana/api-keys.png" alt="Kibana API Keys" />

1. Click on the top right `Create API key` button
2. Give the API key and indicative name (e.g. keep-api-key)
3. Make sure the `Restrict Permissions` toggle is not toggeled
4. On the bottom right corner, click on `Create API key`

<img src="/images/kibana/create-api-key.png" alt="Create Kibana API Key" />

6. Copy the newly created encoded API key and you're set!

<img src="/images/kibana/copy-created-key.png" alt="Copy Kibana API Key" />

## Fingerprinting

Fingerprints in Kibana are simply the alert instance ID.

## Scopes

Certain scopes may be required to perform specific actions or queries via the Datadog Provider. Below is a summary of relevant scopes and their use cases:

- rulesSettings:read (Read alerts)
  Required: True
  Description: Read alerts.
- rulesSettings:write (Modify Alerts)
  Required: True
  Description: Modify alerts.
- actions:read (Read connectors)
  Required: True
  Description: Read connectors.
- actions:write (Write connectors)
  Required: True
  Description: Write connectors.

## Notes

_No information yet, feel free to contribute it using the "Edit this page" link at the bottom of the page_

## Useful Links

- [Kibana Alerting](https://www.elastic.co/guide/en/kibana/current/alerting-getting-started.html)
- [Kibana Connectors](https://www.elastic.co/guide/en/kibana/current/action-types.html)
